General

  • Target

    ad438bf814a9afb159cdd084cdc42ce48d9ee1fa83852429d00fce0ef3072a7f

  • Size

    714KB

  • Sample

    241112-1vd23sscqf

  • MD5

    8fdaa161aed3312facfe584614b319a0

  • SHA1

    9f6721e867c19b369e4328ce054e9c7ff13043d2

  • SHA256

    ad438bf814a9afb159cdd084cdc42ce48d9ee1fa83852429d00fce0ef3072a7f

  • SHA512

    e9ae3c8e60d100aec631008bf11a8877f35f983be29898a9497341ef5e0a498a95c57374ac9d9b923b7d174f6a25988d30ee4e8ef753e1e7e2c1e58990b82520

  • SSDEEP

    12288:zotVRMUSUIgsZCXWPziyjcLtfYfWJkLzcdKWLMbTvLw7Eomqxj6gGC2:z2YUSUIgsZCezFyYodKWLMbTvLw7EoP

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

186.189.249.2:80

59.148.253.194:8080

173.212.197.71:8080

5.89.33.136:80

177.144.130.105:443

190.190.219.184:80

82.76.111.249:443

70.32.115.157:8080

62.84.75.50:80

190.24.243.186:80

51.15.7.145:80

24.232.228.233:80

46.105.114.137:8080

216.47.196.104:80

172.86.186.21:8080

186.103.141.250:443

128.92.203.42:80

190.188.245.242:80

152.169.22.67:80

170.81.48.2:80

rsa_pubkey.plain

Targets

    • Target

      ad438bf814a9afb159cdd084cdc42ce48d9ee1fa83852429d00fce0ef3072a7f

    • Size

      714KB

    • MD5

      8fdaa161aed3312facfe584614b319a0

    • SHA1

      9f6721e867c19b369e4328ce054e9c7ff13043d2

    • SHA256

      ad438bf814a9afb159cdd084cdc42ce48d9ee1fa83852429d00fce0ef3072a7f

    • SHA512

      e9ae3c8e60d100aec631008bf11a8877f35f983be29898a9497341ef5e0a498a95c57374ac9d9b923b7d174f6a25988d30ee4e8ef753e1e7e2c1e58990b82520

    • SSDEEP

      12288:zotVRMUSUIgsZCXWPziyjcLtfYfWJkLzcdKWLMbTvLw7Eomqxj6gGC2:z2YUSUIgsZCezFyYodKWLMbTvLw7EoP

MITRE ATT&CK Enterprise v15

Tasks